Now Hacked
EN
Data breach

Claude Code configuration files expose passwords and API keys

First reported · Last reported · 4 related reports

Passwords and API keys were publicly exposed on GitHub through files associated with Claude Code's option to skip confirmation prompts. Initial reports raised concerns about exposure in 1,122 public copies. A subsequent independent investigation by GitGuardian found 31,088 keys in 23,276 public repositories, with 17% valid at the time of scanning, and identified another 613 keys in Docker Hub images.

Key facts

Affected organization
Being confirmed
Incident type
Data breach
Occurred / detected
Not confirmed
Scale of damage
31,088 keys exposed in 23,276 public repositories; 613 keys also found in Docker Hub images
Cause / method
Public exposure of passwords and API keys through files associated with Claude Code's option to skip confirmation prompts
Location
Other countries

If your data was exposed

Exposed dataEmailPassword

  1. Change your password, and also change it on any other site where you use the same one. Turn on two-factor authentication if available.
  2. Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.

Timeline

  1. Concerns were raised about passwords and keys exposed in 1,122 public copies of Claude Code-related files on GitHub.
  2. It became known that Claude Code's option to skip confirmation prompts could expose passwords and API keys on GitHub.
  3. An independent investigation by GitGuardian found 31,088 keys in 23,276 public repositories, with 17% valid at the time of scanning, and identified another 613 keys in Docker Hub images.

4 related reports

The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.